System and method for accessing a data object stored in a distributed storage network

ABSTRACT

A user device includes a browser module, a DSN interface to a local or external DSN memory and a DS processing module coupled to the DSN interface for storing and retrieving the data object from the DSN memory, wherein the data object is divided into a plurality of data segments and wherein each of the plurality of data segments is stored in the DSN memory as a plurality of encoded data slices that are generated based on an error encoding dispersal function. The browser module is operable to interpret a user input as a request to display a data object, determine the data object is stored in the DSN memory, request the DS processing module to retrieve the data object from the DSN memory and request an application program to open the data object for display.

CROSS-REFERENCE TO RELATED PATENTS

This U.S. Utility patent application claims priority, as a continuation,pursuant to 35 U.S.C. §120 to U.S. Utility patent application Ser. No.12/839,220 entitled, “SYSTEM AND METHOD FOR ACCESSING A DATA OBJECTSTORED IN A DISTRIBUTED STORAGE NETWORK,” filed Jul. 19, 2010, pending,which is incorporated by reference herein in its entirety and made partof the present U.S. Utility patent application for all purposes.

U.S. Utility patent application Ser. No. 12/839,220 claims prioritypursuant to 35 U.S.C. §119(e) to U.S. Provisional Application Ser. No.61/256,436 entitled “DISTRIBUTED STORAGE NETWORK ACCESS,” filed Oct. 30,2009, now expired, which is incorporated by reference herein in itsentirety and made part of the present U.S. Utility patent applicationfor all purposes.

U.S. Utility patent application Ser. No. 12/839,220 claims priority, asa continuation in part application, pursuant to 35 U.S.C. §120 to U.S.Utility patent application Ser. No. 12/218,594 entitled, “STREAMINGMEDIA SOFTWARE INTERFACE TO A DISPERSED DATA STORAGE NETWORK,” filedJul. 16, 2008, and now issued as U.S. Pat. No. 7,962,641, which isincorporated by reference herein in its entirety and made part of thepresent U.S. Utility patent application for all purposes.

STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT

Not applicable.

INCORPORATION-BY-REFERENCE OF MATERIAL SUBMITTED ON A COMPACT DISC

Not applicable.

BACKGROUND OF THE INVENTION

1. Technical Field of the Invention

This invention relates generally to computing systems and moreparticularly to data storage within such computing systems.

2. Description of Related Art

This invention relates generally to computing systems and moreparticularly to data storage solutions within such computing systems.

DESCRIPTION OF RELATED ART

Computers are known to communicate, process, and store data. Suchcomputers range from wireless smart phones to data centers that supportmillions of web searches, stock trades, or on-line purchases every day.In general, a computing system generates data and/or manipulates datafrom one form into another. For instance, an image sensor of thecomputing system generates raw picture data and using an imagecompression program (e.g., JPEG, MPEG, etc.); the computing systemmanipulates the raw picture data into a standardized compressed image.

With continued advances in processing speed and communication speed,computers are capable of processing real time multimedia data forapplications ranging from simple voice communications to streaming highdefinition video. As such, general-purpose information appliances arereplacing purpose-built communications devices (e.g., a telephone). Forexample, smart phones can support telephony communications but they arealso capable of text messaging and accessing the internet to performfunctions including email, web browsing, remote applications access, andmedia communications (e.g., telephony voice, image transfer, musicfiles, video files, real time video streaming, etc.).

Each type of computer is constructed and operates in accordance with oneor more communication, processing, and storage standards. As a result ofstandardization and with advances in technology, more and moreinformation content is being converted into digital formats. Forexample, more digital cameras are now being sold than film cameras, thusproducing more digital pictures. As another example, web-basedprogramming is becoming an alternative to over the air televisionbroadcasts and/or cable broadcasts. As further examples, papers, books,video entertainment, home video, etc. are now being stored digitally.This increased storage of information content increases the demand onthe storage function of computers.

A typical computer storage system includes one or more memory devicesaligned with the needs of the various operational aspects of thecomputer's processing and communication functions. Generally, theimmediacy of access dictates what type of memory device is used. Forexample, random access memory (RAM) memory can be accessed in any randomorder with a constant response time, thus it is typically used for cachememory and main memory. By contrast, memory device technologies thatrequire physical movement such as magnetic disks, tapes, and opticaldiscs, have a variable response time as the physical movement can takelonger than the data transfer, thus they are typically used forsecondary memory (e.g., hard drive, backup memory, etc.).

A computer's storage system will be compliant with one or more computerstorage standards that include, but are not limited to, network filesystem (NFS), flash file system (FFS), disk file system (DFS), smallcomputer system interface (SCSI), internet small computer systeminterface (iSCSI), file transfer protocol (FTP), and web-baseddistributed authoring and versioning (WebDAV). These standards specifythe data storage format (e.g., files, data objects, data blocks,directories, etc.) and interfacing between the computer's processingfunction and its storage system, which is a primary function of thecomputer's memory controller.

Despite the standardization of the computer and its storage system,memory devices fail; especially commercial grade memory devices thatutilize technologies incorporating physical movement (e.g., a discdrive). For example, it is fairly common for a disc drive to routinelysuffer from bit level corruption and to completely fail after threeyears of use. One solution is to a higher-grade disc drive, which addssignificant cost to a computer.

Another solution is to utilize multiple levels of redundant disc drivesto replicate the data into two or more copies. One such redundant driveapproach is called redundant array of independent discs (RAID). In aRAID device, a RAID controller adds parity data to the original databefore storing it across the array. The parity data is calculated fromthe original data such that the failure of a disc will not result in theloss of the original data. For example, RAID 5 uses three discs toprotect data from the failure of a single disc. The parity data, andassociated redundancy overhead data, reduces the storage capacity ofthree independent discs by one third (e.g., n−1=capacity). RAID 6 canrecover from a loss of two discs and requires a minimum of four discswith a storage capacity of n−2.

While RAID addresses the memory device failure issue, it is not withoutits own failures issues that affect its effectiveness, efficiency andsecurity. For instance, as more discs are added to the array, theprobability of a disc failure increases, which increases the demand formaintenance. For example, when a disc fails, it needs to be manuallyreplaced before another disc fails and the data stored in the RAIDdevice is lost. To reduce the risk of data loss, data on a RAID deviceis typically copied on to one or more other RAID devices. While thisaddresses the loss of data issue, it raises a security issue sincemultiple copies of data are available, which increases the chances ofunauthorized access. Further, as the amount of data being stored grows,the overhead of RAID devices becomes a non-trivial efficiency issue.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING(S)

FIG. 1 is a schematic block diagram of an embodiment of a computingsystem in accordance with the invention;

FIG. 2 is a schematic block diagram of an embodiment of a computing corein accordance with the invention;

FIG. 3 is a schematic block diagram of an embodiment of a distributedstorage processing unit in accordance with the invention;

FIG. 4 is a schematic block diagram of an embodiment of a grid module inaccordance with the invention;

FIG. 5 is a diagram of an example embodiment of error coded data slicecreation in accordance with the invention;

FIG. 6 is a schematic block diagram of an embodiment of a file systemhierarchy in accordance with the invention;

FIG. 7 is a schematic block diagram of an embodiment of a computersystem operable to retrieve a data object from a DSN memory inaccordance with the invention;

FIG. 8 is a logic flow diagram of an embodiment of a method forretrieving a data object from a DSN memory in accordance with theinvention;

FIG. 9 is a schematic block diagram of an embodiment of a file name inaccordance with the invention;

FIG. 10 is a logic flow diagram of a method for interpreting a filecommand to open a data object stored in a DSN memory in accordance withthe invention;

FIG. 11 is a logic flow diagram of an embodiment of a method fordetermining a location of a data object in response to a file command inaccordance with the invention;

FIG. 12 is a logic flow diagram of an embodiment of a method forretrieving a data object from the DSN memory in accordance with theinvention;

FIG. 13 is a schematic block diagram of another embodiment of a computersystem to retrieve a data object from a DSN memory in accordance withthe invention;

FIG. 14 is a logic flow diagram of another embodiment of a method forretrieving a data object from a DSN memory in accordance with theinvention;

FIG. 15 is a schematic block diagram of another embodiment of a computersystem to retrieve a data object from a DSN memory in accordance withthe invention;

FIG. 16 is a logic flow diagram of another embodiment of a method forretrieving a data object from a DSN memory in accordance with theinvention; and

FIG. 17 is a logic flow diagram of another embodiment of a method forretrieving a data object from a DSN memory in accordance with theinvention.

DETAILED DESCRIPTION OF THE INVENTION

FIG. 1 is a schematic block diagram of a computing system 10 thatincludes one or more of a first type of user devices 12, one or more ofa second type of user devices 14, at least one distributed storage (DS)processing unit 16, at least one DS managing unit 18, at least onestorage integrity processing unit 20, and a distributed storage network(DSN) memory 22 coupled via a network 24. The network 24 may include oneor more wireless and/or wire lined communication systems; one or moreprivate intranet systems and/or public internet systems; and/or one ormore local area networks (LAN) and/or wide area networks (WAN).

The DSN memory 22 includes a plurality of distributed storage (DS) units36 for storing data of the system. Each of the DS units 36 includes aprocessing module and memory and may be located at a geographicallydifferent site than the other DS units (e.g., one in Chicago, one inMilwaukee, etc.). The processing module may be a single processingdevice or a plurality of processing devices. Such a processing devicemay be a microprocessor, micro-controller, digital signal processor,microcomputer, central processing unit, field programmable gate array,programmable logic device, state machine, logic circuitry, analogcircuitry, digital circuitry, and/or any device that manipulates signals(analog and/or digital) based on hard coding of the circuitry and/oroperational instructions. The processing module may have an associatedmemory and/or memory element, which may be a single memory device, aplurality of memory devices, and/or embedded circuitry of the processingmodule. Such a memory device may be a read-only memory, random accessmemory, volatile memory, non-volatile memory, static memory, dynamicmemory, flash memory, cache memory, and/or any device that storesdigital information. Note that if the processing module includes morethan one processing device, the processing devices may be centrallylocated (e.g., directly coupled together via a wired and/or wireless busstructure) or may be distributedly located (e.g., cloud computing viaindirect coupling via a local area network and/or a wide area network).Further note that when the processing module implements one or more ofits functions via a state machine, analog circuitry, digital circuitry,and/or logic circuitry, the memory and/or memory element storing thecorresponding operational instructions may be embedded within, orexternal to, the circuitry comprising the state machine, analogcircuitry, digital circuitry, and/or logic circuitry. Still further notethat, the memory element stores, and the processing module executes,hard coded and/or operational instructions corresponding to at leastsome of the steps and/or functions illustrated in FIGS. 1-15.

Each of the user devices 12-14, the DS processing unit 16, the DSmanaging unit 18, and the storage integrity processing unit 20 may be aportable computing device (e.g., a social networking device, a gamingdevice, a cell phone, a smart phone, a personal digital assistant, adigital music player, a digital video player, a laptop computer, ahandheld computer, a video game controller, and/or any other portabledevice that includes a computing core) and/or a fixed computing device(e.g., a personal computer, a computer server, a cable set-top box, asatellite receiver, a television set, a printer, a fax machine, homeentertainment equipment, a video game console, and/or any type of homeor office computing equipment). Such a portable or fixed computingdevice includes a computing core 26 and one or more interfaces 30, 32,and/or 38. An embodiment of the computing core 26 will be described withreference to FIG. 2.

With respect to the interfaces, each of the interfaces 30, 32, and 38includes software and/or hardware to support one or more communicationlinks via the network 24 and/or directly. For example, interfaces 30support a communication link (wired, wireless, direct, via a LAN, viathe network 24, etc.) between the first type of user device 14 and theDS processing unit 16. As another example, DSN interface 32 supports aplurality of communication links via the network 24 between the DSNmemory 22 and the DS processing unit 16, the first type of user device12, and/or the storage integrity processing unit 20. As yet anotherexample, interface 38 supports a communication link between the DSmanaging unit 18 and any one of the other devices and/or units 12, 14,16, 20, and/or 22 via the network 24.

In general and with respect to data storage, the system 10 supportsthree primary functions: distributed network data storage management,distributed data storage and retrieval, and data storage integrityverification. In accordance with these three primary functions, data canbe distributedly stored in a plurality of physically different locationsand subsequently retrieved in a reliable and secure manner regardless offailures of individual storage devices, failures of network equipment,the duration of storage, the amount of data being stored, attempts athacking the data, etc.

The DS managing unit 18 performs distributed network data storagemanagement functions, which include establishing distributed datastorage parameters, performing network operations, performing networkadministration, and/or performing network maintenance. The DS managingunit 18 establishes the distributed data storage parameters (e.g.,allocation of virtual DSN memory space, distributed storage parameters,security parameters, billing information, user profile information,etc.) for one or more of the user devices 12-14 (e.g., established forindividual devices, established for a user group of devices, establishedfor public access by the user devices, etc.). For example, the DSmanaging unit 18 coordinates the creation of a vault (e.g., a virtualmemory block) within the DSN memory 22 for a user device (for a group ofdevices, or for public access). The DS managing unit 18 also determinesthe distributed data storage parameters for the vault. In particular,the DS managing unit 18 determines a number of slices (e.g., the numberthat a data segment of a data file and/or data block is partitioned intofor distributed storage) and a read threshold value (e.g., the minimumnumber of slices required to reconstruct the data segment).

As another example, the DS managing module 18 creates and stores,locally or within the DSN memory 22, user profile information. The userprofile information includes one or more of authentication information,permissions, and/or the security parameters. The security parameters mayinclude one or more of encryption/decryption scheme, one or moreencryption keys, key generation scheme, and data encoding/decodingscheme.

As yet another example, the DS managing unit 18 creates billinginformation for a particular user, user group, vault access, publicvault access, etc. For instance, the DS managing unit 18 tracks thenumber of times user accesses a private vault and/or public vaults,which can be used to generate a per-access bill. In another instance,the DS managing unit 18 tracks the amount of data stored and/orretrieved by a user device and/or a user group, which can be used togenerate a per-data-amount bill.

The DS managing unit 18 also performs network operations, networkadministration, and/or network maintenance. As at least part ofperforming the network operations and/or administration, the DS managingunit 18 monitors performance of the devices and/or units of the system10 for potential failures, determines the devices and/or unit'sactivation status, determines the devices' and/or units' loading, andany other system level operation that affects the performance level ofthe system 10. For example, the DS managing unit 18 receives andaggregates network management alarms, alerts, errors, statusinformation, performance information, and messages from the devices12-14 and/or the units 16, 20, 22. For example, the DS managing unit 18receives a simple network management protocol (SNMP) message regardingthe status of the DS processing unit 16.

The DS managing unit 18 performs the network maintenance by identifyingequipment within the system 10 that needs replacing, upgrading,repairing, and/or expanding. For example, the DS managing unit 18determines that the DSN memory 22 needs more DS units 36 or that one ormore of the DS units 36 needs updating.

The second primary function (i.e., distributed data storage andretrieval) begins and ends with a user device 12-14. For instance, if asecond type of user device 14 has a data object 40, such as a data fileand/or data block, to store in the DSN memory 22, it sends the dataobject 40 to the DS processing unit 16 via its interface 30. As will bedescribed in greater detail with reference to FIG. 2, the interface 30functions to mimic a conventional operating system (OS) file systeminterface (e.g., network file system (NFS), flash file system (FFS),disk file system (DFS), file transfer protocol (FTP), web-baseddistributed authoring and versioning (WebDAV), etc.) and/or a blockmemory interface (e.g., small computer system interface (SCSI), internetsmall computer system interface (iSCSI), etc.). In addition, theinterface 30 may attach a user identification code (ID) to the dataobject 40.

The DS processing unit 16 receives the data object 40 via its interface30 and performs a distributed storage (DS) process 34 thereon (e.g., anerror coding dispersal storage function). The DS processing 34 begins bypartitioning the data object 40 into one or more data segments, which isrepresented as Y data segments. The DS processing 34 may partition thedata object 40 into fixed byte size segments (e.g., 21 to 2n bytes,where n=>2) or variable byte size segments (e.g., change byte size fromsegment to segment, or from groups of segments to groups of segments,etc.).

For example, in FIG. 1 for each of the Y number of data segments 42 a-n,the DS processing 34 error encodes (e.g., forward error correction(FEC), information dispersal algorithm, or error correction coding) andslices (or slices then error encodes) the data segments 42 a-n into aplurality of error coded (EC) data slices 42 a-42 n and 46 a-46 n, whichare represented as X slices per data segment. The number of slices (X)per segment, which corresponds to a number of pillars n, is set inaccordance with the distributed data storage parameters and the errorcoding scheme. For example, if a Reed-Solomon (or other FEC scheme) isused in an X/T system, then a data segment is divided into X number ofslices, where T number of slices are needed to reconstruct the originaldata (i.e., T is the threshold). As a few specific examples, the X/Tfactor may be 5/3; 6/4; 8/6; 8/5; 16/10.

For each slice 44 a-n and 46 a-n, the DS processing unit 16 creates aunique slice name and appends it to the corresponding slice. The slicename includes universal DSN memory addressing routing information (e.g.,virtual memory addresses in the DSN memory 22) and user-specificinformation (e.g., user ID, file name, data block identifier, etc.).

The DS processing unit 16 transmits the plurality of EC slices 44 a-nand 46 a-n to a plurality of DS units 36 of the DSN memory 22 via theDSN interface 32 and the network 24. The DSN interface 32 formats eachof the slices for transmission via the network 24. For example, the DSNinterface 32 may utilize an internet protocol (e.g., TCP/IP, etc.) topacketize the slices 44 a-n and 46 a-n for transmission via the network24.

The number of DS units 36 receiving the slices 44 a-n and 46 a-n isdependent on the distributed data storage parameters established by theDS managing unit 18. For example, the DS managing unit 18 may indicatethat each slice is to be stored in a different DS unit 36. As anotherexample, the DS managing unit 18 may indicate that like slice numbers ofdifferent data segments are to be stored in the same DS unit 36. Forexample, the first slice 44 a and 46 a of each of the data segments 42a-n is to be stored in a first DS unit 36, the second slice 44 b and 46b of each of the data segments 42 a-n is to be stored in a second DSunit 36, etc. In this manner, the data is encoded and distributedlystored at physically diverse locations to improved data storageintegrity and security. Further examples of encoding the data segmentswill be provided with reference to one or more of FIGS. 2-15.

Each DS unit 36 that receives a slice for storage translates the virtualDSN memory address of the slice into a local physical address forstorage. Accordingly, each DS unit 36 maintains a virtual to physicalmemory mapping to assist in the storage and retrieval of data.

The first type of user device 12 performs a similar function to storedata in the DSN memory 22 with the exception that it includes the DSprocessing. As such, the device 12 encodes and slices the data fileand/or data block it has to store. The device then transmits the slices11 to the DSN memory via its DSN interface 32 and the network 24.

For a second type of user device 14 to retrieve a data file or datablock from memory, it issues a read command via its interface 30 to theDS processing unit 16. The DS processing unit 16 performs the DSprocessing 34 to identify the DS units 36 storing the slices of the datafile and/or data block based on the read command. The DS processing unit16 may also communicate with the DS managing unit 18 to verify that theuser device 14 is authorized to access the requested data.

Assuming that the user device is authorized to access the requesteddata, the DS processing unit 16 issues slice read commands to at least athreshold number of the DS units 36 storing the requested data (e.g., toat least 10 DS units for a 16/10 error coding scheme). Each of the DSunits 36 receiving the slice read command, verifies the command,accesses its virtual to physical memory mapping, retrieves the requestedslice, or slices, and transmits it to the DS processing unit 16.

Once the DS processing unit 16 has received a read threshold number ofslices for a data segment, it performs an error decoding function andde-slicing to reconstruct the data segment. When Y number of datasegments has been reconstructed, the DS processing unit 16 provides dataobject 40 to the user device 14. Note that the first type of user device12 performs a similar process to retrieve data object 40.

The storage integrity processing unit 20 performs the third primaryfunction of data storage integrity verification. In general, the storageintegrity processing unit 20 periodically retrieves slices 48, and/orslice names, of a data object 40 to verify that one or more slices havenot been corrupted or lost (e.g., the DS unit failed). The retrievalprocess mimics the read process previously described.

If the storage integrity processing unit 20 determines that one or moreslices 48 is corrupted or lost, it rebuilds the corrupted or lostslice(s) in accordance with the error coding scheme. The storageintegrity processing unit 20 stores the rebuilt slice, or slices, in theappropriate DS unit(s) 36 in a manner that mimics the write processpreviously described.

FIG. 2 is a schematic block diagram of an embodiment of a computing core26 that includes a processing module 50, a memory controller 52, mainmemory 54, a video graphics processing unit 55, an input/output (IO)controller 56, a peripheral component interconnect (PCI) interface 58,at least one IO interface 60, IO device interface module 62, a read onlymemory (ROM) basic input output system (BIOS) 64, and one or more memoryinterface modules. The memory interface module(s) includes one or moreof a universal serial bus (USB) interface module 66, a host bus adapter(HBA) interface module 68, a network interface module 70, a flashinterface module 72, a hard drive interface module 74, and a DSNinterface module 76. Note the DSN interface module 76 and/or the networkinterface module 70 may function as the interface 30 of the user device14 of FIG. 1. Further note that the IO device interface module 62 and/orthe memory interface modules may be collectively or individuallyreferred to as IO ports.

The processing module 50 may be a single processing device or aplurality of processing devices. Such a processing device may be amicroprocessor, micro-controller, digital signal processor,microcomputer, central processing unit, field programmable gate array,programmable logic device, state machine, logic circuitry, analogcircuitry, digital circuitry, and/or any device that manipulates signals(analog and/or digital) based on hard coding of the circuitry and/oroperational instructions. The processing module 50 may have anassociated memory and/or memory element, which may be a single memorydevice, a plurality of memory devices, and/or embedded circuitry of theprocessing module 50. Such a memory device may be a read-only memory,random access memory, volatile memory, non-volatile memory, staticmemory, dynamic memory, flash memory, cache memory, and/or any devicethat stores digital information. Note that if the processing module 50includes more than one processing device, the processing devices may becentrally located (e.g., directly coupled together via a wired and/orwireless bus structure) or may be distributedly located (e.g., cloudcomputing via indirect coupling via a local area network and/or a widearea network). Further note that when the processing module 50implements one or more of its functions via a state machine, analogcircuitry, digital circuitry, and/or logic circuitry, the memory and/ormemory element storing the corresponding operational instructions may beembedded within, or external to, the circuitry comprising the statemachine, analog circuitry, digital circuitry, and/or logic circuitry.Still further note that, the memory element stores, and the processingmodule 50 executes, hard coded and/or operational instructionscorresponding to at least some of the steps and/or functions illustratedin FIGS. 1-15.

FIG. 3 is a schematic block diagram of an embodiment of a dispersedstorage (DS) processing module 34 of user device 12 and/or of the DSprocessing unit 16. The DS processing module 34 includes a gatewaymodule 78, an access module 80, a grid module 82, and a storage module84. The DS processing module 34 may also include an interface 30 and DSNinterface 32 or the interfaces 30 and/or 32 may be part of user 12 or ofthe DS processing unit 14. The DS processing module 34 may furtherinclude a bypass/feedback path between the storage module 84 to thegateway module 78. Note that the modules 78-84 of the DS processingmodule 34 may be in a single unit or distributed across multiple units.

In an example of storing data, the gateway module 78 receives anincoming request with a data object 40. The incoming request may alsoinclude a user ID field 86, a data object name field 88 and othercorresponding information such as a process identifier (e.g., aninternal process/application ID), metadata, a file system directory, ablock number, a transaction message, a user device identity (ID), a dataobject identifier, a source name, and/or user information. The gatewaymodule 78 authenticates the user associated with the data object byverifying the user ID 86 with the managing unit 18 and/or anotherauthenticating unit.

When the user is authenticated, the gateway module 78 obtains userinformation from the management unit 18, the user device 12-14, and/orthe other authenticating unit. The user information includes a vaultidentifier, operational parameters, and user attributes (e.g., userdata, billing information, etc.). A vault identifier identifies a vault,which is a virtual memory space that maps to a set of DS storage units36. For example, vault 1 (i.e., user 1's DSN memory space) includeseight DS storage units (X=8 wide) and vault 2 (i.e., user 2's DSN memoryspace) includes sixteen DS storage units (X=16 wide). The operationalparameters may include an error coding algorithm, the width n (number ofpillars X or slices per segment for this vault), a read threshold T, awrite threshold, an encryption algorithm, a slicing parameter, acompression algorithm, an integrity check method, caching settings,parallelism settings, and/or other parameters that may be used to accessthe DSN memory layer.

The gateway module 78 uses the user information to assign a source name35 to the data object 40. For instance, the gateway module 60 determinesthe source name 35 of the data object 40 based on the vault identifierand the data object 40. For example, the source name may contain a fileidentifier (ID), a vault generation number, a reserved field, and avault identifier (ID). As another example, the gateway module 78 maygenerate the file ID based on a hash function of the data object 40.Note that the gateway module 78 may also perform message conversion,protocol conversion, electrical conversion, optical conversion, accesscontrol, user identification, user information retrieval, trafficmonitoring, statistics generation, configuration, management, and/orsource name determination.

The access module 80 receives the data object 40 and creates a pluralityof data segments 1 through Y 42 a-n in accordance with a data storageprotocol (e.g., file storage system, a block storage system, and/or anaggregated block storage system). The number Y of data segments may befixed with a segment size depending on the data object size or thenumber of segments may vary with a fixed segment size. For example, whenthe number Y of segments is chosen to be a fixed number, then the sizeof the segments varies as a function of the size of the data object. Forinstance, if the data object is an image file of 4,194,304 eight bitbytes (e.g., 33,554,432 bits) and the number of segments Y=131,072, theneach segment is 256 bits or 32 bytes. As another example, when thesegment size is fixed, then the number of segments Y varies based on thesize of data object. For instance, if the data object is an image fileof 4,194,304 bytes and the fixed segment size of each segment is 4,096bytes, then the number of segments Y=1,024. Note that each segment isassociated with the same source name 35.

The grid module 82 receives the Y data segments and may manipulate(e.g., compression, encryption, cyclic redundancy check (CRC), etc.)each of the data segments before performing an error coding function ofthe error coding dispersal storage function to produce a pre-manipulateddata segment. After manipulating a data segment, if applicable, the gridmodule 82 error encodes (e.g., Reed-Solomon, Convolution encoding,Trellis encoding, etc.) the data segment or manipulated data segmentinto X error coded data slices 42-44.

The value X, or the number of pillars (e.g., X=16), is chosen as aparameter of the error coding dispersal storage function. Otherparameters of the error coding dispersal function include a readthreshold T, a write threshold W, etc. The read threshold (e.g., T=10,when X=16) corresponds to the minimum number of error coded data slicesrequired to reconstruct the data segment. In other words, the DSprocessing module 34 can compensate for X-T (e.g., 16−10=6) missingerror coded data slices per data segment. The write threshold Wcorresponds to a minimum number of DS storage units that acknowledgeproper storage of their respective data slices before the DS processingmodule indicates proper storage of the encoded data segment. Note thatthe write threshold W is greater than or equal to the read threshold T(i.e., W≧T) for a given number of pillars (X).

For each data slice of a data segment, the grid module 82 generates aunique slice name 37 and attaches it thereto. The slice name 37 includesa universal routing information field and a vault specific field and maybe 48 bytes (e.g., 24 bytes for each of the universal routinginformation field and the vault specific field). As illustrated, theuniversal routing information field includes a slice index, a vault ID,a vault generation, and a reserved field. The slice index is based onthe pillar number n and the vault ID and, as such, is unique for eachpillar (e.g., slices of the same pillar for the same vault for anysegment will share the same slice index). The vault specific fieldincludes a data name, which includes a file ID and a segment number(e.g., a sequential numbering of data segments 1-Y of a simple dataobject or a data block number).

Prior to outputting the error coded data slices of a data segment, thegrid module may perform post-slice manipulation on the slices. Ifenabled, the manipulation includes slice level compression, encryption,CRC, addressing, tagging, and/or other manipulation to improve theeffectiveness of the computing system.

When the error coded (EC) data slices of a data segment are ready forstorage, the grid module 82 determines which of the DS storage units 36will store the EC data slices based on a dispersed storage memorymapping associated with the user's vault and/or DS storage unit 36attributes. The DS storage unit attributes may include availability,self-selection, performance history, link speed, link latency,ownership, available DSN memory, domain, cost, a prioritization scheme,a centralized selection message from another source, a lookup table,data ownership, and/or any other factor to optimize the operation of thecomputing system. Note that the number of DS storage units 36 in anembodiment is equal to or greater than the number of pillars (e.g., X)so that no more than one error coded data slice of the same data segmentis stored on the same DS storage unit 36. Further note that EC dataslices of the same pillar number but of different segments (e.g., ECdata slice 1 of data segment 1 and EC data slice 1 of data segment 2)may be stored on the same or different DS storage units 36.

The storage module 84 performs an integrity check on the outboundencoded data slices and, when successful, identifies a plurality of DSstorage units based on information provided by the grid module. Thestorage module then outputs the encoded data slices 1 through X of eachsegment 1 through Y to the DS storage units. Each of the DS storageunits 36 stores its EC data slice(s) and maintains a local virtual DSNaddress to physical location table to convert the virtual DSN address ofthe EC data slice(s) into physical storage addresses.

In an example of a read operation, the user device 12 and/or 14 sends aread request to the DS processing 34, which authenticates the request.When the request is authentic, the DS processing 34 sends a read messageto each of the DS storage units 36 storing slices of the data objectbeing read. The slices are received via the DSN interface 32 andprocessed by the storage module 84, which performs a parity check andprovides the slices to the grid module 82 when the parity check issuccessful. The grid module 82 decodes the slices in accordance with theerror coding dispersal storage function to reconstruct the data segment.The access module 80 reconstructs the data object from the data segmentsand the gateway module 78 formats the data object for transmission tothe user device.

FIG. 4 is a schematic block diagram of an embodiment of a grid module 82that includes a control unit 73, a pre-slice manipulator 75, an encoder77, a slicer 79, a post-slice manipulator 81, a pre-slice de-manipulator83, a decoder 85, a de-slicer 87, and/or a post-slice de-manipulator 89.Note that the control unit 73 may be partially or completely external tothe grid module 82. For example, the control unit 73 may be part of thecomputing core at a remote location, part of a user device, part of theDS managing unit 18, or distributed amongst one or more DS storageunits.

In an example of write operation, the pre-slice manipulator 75 receivesa data segment 42 and a write instruction from an authorized userdevice. The pre-slice manipulator 75 determines if pre-manipulation ofthe data segment 42 is required and, if so, what type. The pre-slicemanipulator 75 may make the determination independently or based oninstructions from the control unit 73, where the determination is basedon a computing system-wide predetermination, a table lookup, vaultparameters associated with the user identification, the type of data,security requirements, available DSN memory, performance requirements,and/or other metadata.

Once a positive determination is made, the pre-slice manipulator 75manipulates the data segment 42 in accordance with the type ofmanipulation. For example, the type of manipulation may be compression(e.g., Lempel-Ziv-Welch, Huffman, Golomb, fractal, wavelet, etc.),signatures (e.g., Digital Signature Algorithm (DSA), Elliptic Curve DSA,Secure Hash Algorithm, etc.), watermarking, tagging, encryption (e.g.,Data Encryption Standard, Advanced Encryption Standard, etc.), addingmetadata (e.g., time/date stamping, user information, file type, etc.),cyclic redundancy check (e.g., CRC32), and/or other data manipulationsto produce the pre-manipulated data segment.

The encoder 77 encodes the pre-manipulated data segment 42 using aforward error correction (FEC) encoder (and/or other type of erasurecoding and/or error coding) to produce an encoded data segment 94. Theencoder 77 determines which forward error correction algorithm to usebased on a predetermination associated with the user's vault, a timebased algorithm, user direction, DS managing unit direction, controlunit direction, as a function of the data type, as a function of thedata segment 42 metadata, and/or any other factor to determine algorithmtype. The forward error correction algorithm may be Golay,Multidimensional parity, Reed-Solomon, Hamming, Bose Ray ChauduriHocquenghem (BCH), Cauchy-Reed-Solomon, or any other FEC encoder. Notethat the encoder 77 may use a different encoding algorithm for each datasegment 42, the same encoding algorithm for the data segments 42 of adata object, or a combination thereof.

The encoded data segment 94 is of greater size than the data segment 42by the overhead rate of the encoding algorithm by a factor of X/T, whereX is the width or number of slices, and T is the read threshold. In thisregard, the corresponding decoding process can accommodate at most X-Tmissing EC data slices and still recreate the data segment 42. Forexample, if X=16 and T=10, then the data segment 42 will be recoverableas long as 10 or more EC data slices per data segment are not corrupted.

The slicer 79 transforms the encoded data segment 94 into EC data slicesin accordance with the slicing parameter from the vault for this userand/or data segment 42. For example, if the slicing parameter is X=16,then the slicer slices each encoded data segment 94 into 16 encodedslices.

The post-slice manipulator 81 performs, if enabled, post-manipulation onthe encoded slices to produce the EC data slices. If enabled, thepost-slice manipulator 81 determines the type of post-manipulation,which may be based on a computing system-wide predetermination,parameters in the vault for this user, a table lookup, the useridentification, the type of data, security requirements, available DSNmemory, performance requirements, control unit directed, and/or othermetadata. Note that the type of post-slice manipulation may includeslice level compression, signatures, encryption, CRC, addressing,watermarking, tagging, adding metadata, and/or other manipulation toimprove the effectiveness of the computing system.

In an example of a read operation, the post-slice de-manipulator 89receives at least a read threshold number of EC data slices and performsthe inverse function of the post-slice manipulator 81 to produce aplurality of encoded slices. The de-slicer 87 de-slices the encodedslices to produce an encoded data segment 94. The decoder 85 performsthe inverse function of the encoder 77 to recapture the data segment 42.The pre-slice de-manipulator 83 performs the inverse function of thepre-slice manipulator 75 to recapture the data segment.

FIG. 5 is a diagram of an example of slicing an encoded data segment 94by the slicer 79. In this example, the encoded data segment includesthirty-two bits, but may include more or less bits. The slicer 79disperses the bits of the encoded data segment 94 across the EC dataslices in a pattern as shown. As such, each EC data slice does notinclude consecutive bits of the data segment 94 reducing the impact ofconsecutive bit failures on data recovery. For example, if EC data slice2 (which includes bits 1, 5, 9, 13, 17, 25, and 29) is unavailable(e.g., lost, inaccessible, or corrupted), the data segment can bereconstructed from the other EC data slices (e.g., 1, 3 and 4 for a readthreshold of 3 and a width of 4).

FIG. 6 is a schematic block diagram of an embodiment of a file systemhierarchy including a plurality of user virtual memories in a virtualDSN address space 148, a virtual dispersed storage network (DSN) addressto physical location table 142, and a physical dispersed storage network(DSN) memory 22. The file system hierarchy is an illustration oftranslating a user virtual memory address space 152 into a virtualdispersed storage network (DSN) address space 148 and then to a physicaladdress in a DSN memory 22. In this illustration, the physical DSNmemory 22 includes a plurality of DS storage units 36 (e.g., A, C, D,and F). In an example, where there are four pillars, there are fourslices (X=4) created for each of Y data segments. Pillars can beallocated to more than one DS storage unit, but a given DS storage unitis not generally assigned to store more than one pillar from a givenfile/data object of a user vault to improve system robustness (e.g.,avoiding loss of multiple slices of a data segment as a result of asingle DS storage unit failure).

In an embodiment, one of the plurality of user virtual memories 152 a-nutilizes a native OS file system to access the virtual DSN address space148 by including source name information in requests such as read,write, modify, delete, list, etc. A vault identifier in the source nameand/or a file/block name may be used to index the virtual DSN addressspace 148 to determine a user vault. A unique virtual vault isassociated with each user (e.g., an individual, a group of individuals,a business entity, a group of business entities, etc.) and may containoperational parameters, user attributes (e.g., user identification,billing data, etc.) and a list of DSN memories 22 and a plurality ofstorage units 36 for a DSN memory 22 that may be utilized to support theuser.

In an example, the total virtual DSN address space 148 is defined by aforty-eight byte identifier thus creating 25648 possible slice names.The virtual DSN address space 148 accommodates addressing of EC dataslices corresponding to segments of data objects (e.g., data file,blocks, streams) over various generations and vaults. The slice name isa virtual DSN address and remains the same even as different DS memories22 or DS storage units 36 are added or deleted from the physical DSNmemory 22.

A user has a range of virtual DSN addresses assigned to their vault,user virtual memory 152 a-n. For instance, the virtual DSN addressestypically do not change over the operational lifespan of the system forthe user. In another instance, the virtual DSN address space 148 isdynamically altered from time to time to provide such benefits asimproved security and expansion, retraction, and/or capability. Avirtual DSN address space 148 security algorithm may alter the virtualDSN address space 148 according to one or more of a command (e.g., fromthe DS managing unit 18), a schedule, a detected security breach, or anyother trigger. The virtual DSN address may also be encrypted in use thusrequiring encryption and decryption steps whenever the virtual DSNaddress is used.

The vault and file name index used to access the virtual DSN addressspace 148 and to create the slice names (virtual DSN addresses) may alsobe used as an index to access the virtual DSN address to physicallocation table 142. For example, the virtual DSN address to physicallocation table 142 is sorted by vaults and pillars so that subsequentaddresses are organized by pillar of the file data segments of a dataobject that have EC data slices with the same slice identifier and henceare typically stored at the same DS storage unit (e.g., slices having afirst pillar identifier are stored in DS storage unit A of DSN memory22). The output of the access to the virtual DSN address to physicallocation table 142 is the DSN memory identifier 154 and DS storage unitidentifiers 156. A source name, data segment header and/or slice namemay include the DSN memory identifier 154 and/or DS storage unitidentifiers 156.

The slice names may be used as the virtual index to the memory system ofeach DS storage unit 36 of a particular DS memory 22 to gain access tothe physical location of the EC data slices. In this instance, the DSstorage unit 36 of the DS memory 22 maintains a local table correlatingslice names (virtual DSN address) to the addresses of the physical mediainternal to the DS storage unit 36. For example, user number 1 has avault identified operational parameter of four pillars and pillar 0 ismapped to DS storage unit A of DSN memory 22, pillar 1 is mapped to DSstorage unit C of DSN memory 22, pillar 2 is mapped to DS storage unit Dof DSN memory 22, and pillar 3 is mapped to DS storage unit F of DSNmemory 22.

FIG. 7 is a schematic block diagram of an embodiment of a computersystem 200 operable to access a data object from DSN memory 22. Thesystem includes one or more user devices 12 a-b, a local DSN memory 22,an external network 220 and an external memory 224. In an embodiment,the user device 12 a and the user device 12 b are operably coupled tothe DSN memory 22 through a local connection or local area network orthrough an external network such as external network 220. The userdevices 12 a-b are operably coupled to the external memory 224 throughthe external network 220. The external memory 224 may include, forexample, a file server, web server, another DSN memory 22, etc. Theexternal network 220 may include a metropolitan area network (MAN)and/or a wide area network (e.g., the internet and/or intranet).

User device 12 a-b includes a graphical user interface (GUI) 206, abrowser 208, an operating system (OS) 210 and application program 212.The OS 210 provides an operating environment for the user device 12 andacts as an intermediary between modules (including hardware and/orsoftware applications) of the user device 12. The GUI 206 provides theinterface to a user device display. The application program 212 includessoftware, and hardware (such as processing modules) necessary to operatethe software, that perform functions or tasks for a user of the userdevice or for another application program or device. Examples ofapplication programs include text or word processing programs, imageprocessing programs, database programs, development tools, drawingprograms, communication programs, etc. In an embodiment, the applicationprogram 212 includes a video and/or audio multimedia player, such asWindows Media Player, Apple Quicktime, Real Player, Apple iTunes, AdobeFlash Player, etc.

The browser 208 is operable to retrieve and display an informationresource, such as a text file (.doc, .pdf, etc.), HTML file, XML file,image file (such as .jpg, .pdf, .tiff, etc.), video file (such as .swf,.mov, .mpg4, .aiff, etc.), audio file (such as, .wma, .wav, .mp3, etc),or other types of files. The browser 208 includes an application plugin214 that is operable to interact with the application program 212.Through the application plugin 214, the browser 208 is operable tolaunch the application program 212 to either open a file in a GUIexternal to the web browser or within a web page, window or other GUIgenerated by the browser 208.

In an embodiment illustrated in user device 12 a, the browser 208includes DS processing module 34. The browser 208 is operable torecognize an address for the DSN memory 22 or file name of a data objectstored in DS memory 22 and launch DS processing module 34 to retrievethe data object for display within a web page, window or other GUIgenerated by the browser 208. In another embodiment, the browser 208launches the application program 212 to either display the data objectexternal to the web browser or within a web page, window or other GUIgenerated by the browser 208.

In an embodiment illustrated in User Device 12 b, the browser 208includes a DS processing plugin 218 that is operable to interact with DSprocessing 34. The browser 208 is operable to recognize an address forthe DSN memory 22 or file name of a data object stored in DS memory 22and through the DS processing plugin 218, the browser 208 is operable tolaunch DS processing module 34 to access the data object and to eitheropen the data object in a GUI external to the web browser or within aweb page, window or other GUI generated by the browser 208.

FIG. 8 is a logic flow diagram of an embodiment of a method 240 foraccessing a data object stored in a DSN memory 22 by a browser 208 inuser device 12 a-b. In step 242, the browser 208 receives a file commandthat includes a file name of a data object. In an embodiment, the filename of the data object includes a domain name, a data object name andfile type identifier. For example, the file name of the data object mayinclude the following: localdsnet.com/dataobjectname.wmv, whereinlocaldsnet.com is the domain name referring to a local DSN memory 22. Inanother example, the file name of the data object includes thefollowing: externaldsnet.com/vault1/dataobjectname.doc, whereinexternaldsnet.com is a domain name that points to an external DS memory22 accessed by the external network 220 and vault1/dataobjectname.doc isthe data object name including a vault identifier of the virtual DSNaddress. In another example, the file name of the data object includesthe following: webservers.com/partitionl.mpg4, wherein the domain namewebservers.com refers to webservers in external memory 224. The filenames in the above examples also include a file type identifier, such as.pdf for an Adobe text file and .wmv for a Windows Media video file. Inanother embodiment, the file name may include an IP address for thedestination, rather than a domain name. For example, an IP address maypoint to a DSN memory 22 in the file name. In another embodiment, thefile name may include a local drive to the user device 12.

Based on the file command for the data object, and in particular forexample, the domain name or IP address or local drive in the file name,the browser 208 determines a location for the data object in step 244.The file name may be used to perform a table lookup, an addresstranslation, domain name service lookup, vault and file name index, or alink/web directory lookup to determine the location of the data object.When the browser determines that the data object is located in a localor external DSN memory 22, it launches DS processing 34. The DSprocessing 34 determines a virtual DSN address of the data object forthe browser 208 in step 246. In an embodiment, the file name includesthe data object name 88 shown in FIG. 3, and the virtual DSN address isdetermined from the data object name 88 by accessing the virtual DSNaddress space 148 for a user vault 200. In an embodiment, the file nameincludes a vault identifier or other part of a virtual DSN address ofthe data object. For example, the file name of the data object mayinclude a vault identifier or file ID or source name or user identifierassociated with the data object, such as in the following:localdsnet.com/vault1/fileID/dataobjectname.mov or in the following:externaldsnet.com/DSNvirtualaddress/dataobjectname.pdf.

File data from the data object is retrieved from the DSN memory in step248 and processed for display either in a GUI external to the browser208 or within a web page, window or other GUI generated by the browser208. In an embodiment, the whole data object is reconstructed prior todisplay. In another embodiment, file data from the data object isstreamed to the application program 212 and displayed as processed. Inan embodiment, the browser 208 requests DS processing module 34 toretrieve the data object for processing by the application program 212.

FIG. 9 is a schematic block diagram of an embodiment of a file name 260.In an embodiment, the file name 260 includes one or more of alocaldrive/domain name/IP address 262, a vault ID 264, a DSN virtualaddress 266 (in whole or in part), a data object name 268 and a filetype identifier 270. The file name 260 may include other parameters oralternate data as well.

FIG. 10 is a logic flow diagram of a method for interpreting a filecommand by the browser 208 in user device 12 a-b to display a dataobject stored in a DSN memory. In step 282, the browser 208 receives afile command with a file name 260 of a data object in response to a userinput. In an embodiment, the browser 208 displays an HTML or other typeof formatted page that includes a link to an embedded file command andthe user input is selecting the embedded link. For example, the filecommand includes the file name for the data object and may also includean identifier of an application program 212 to display the data objectand other parameters for retrieving and/or displaying the data object.For example, the file command may include:

<OBJECT ID=“MediaPlayer” WIDTH=“192” HEIGHT=“190” <PARAM name=“FileName”VALUE=“localdsnet.com/ dataobjectname.wmv”> <PARAM name=“ShowControls”VALUE=“true”> <PARAM name=“ShowStatusBar” value=“false”> </OBJECT>The above file command example includes an object identifier thatidentifies Windows Media Player as the multimedia player. It alsoincludes the file name of the data object aslocaldsnet.com/dataobjectname.wmv. In addition, it specifies a windowwidth and height to display the data object. The file command alsoincludes a parameter to show video controls and not show a status bar.In another example, the file command embedded in a web page may include:

<ahref=“externalsnet.com/virtualDSNaddress/dataobjectname.pdf”> DownloadPDF</a>In this example, the file command includes the virtual DSN address aspart of the file name. It also includes a file type identifier as a PDFfile.In another embodiment, the file command may include a local drive to theuser device 12. For example the file command may include:

<open E/vault1/dataobjectname.doc>

In this example, the local drive designated as E/ is mapped to the DSNmemory 22.

In another embodiment, the browser 208 receives a text string input witha file name 260 of a data object. For example, the browser may receive auser input of the following file name 260 in the form of text stringinput in a user prompt of the GUI:“http://localsnet.com/vault1/dataobjectname.mp3”.

The browser 208 then interprets the file command as a request to displayor open the data object using application program 212 in step 284. Thebrowser 208 determines the application program 212 from an identifier inthe file command in step 286. For example, the application program 212may be identified in the file command. In another embodiment, thebrowser 208 determines application program 212 from the file typeidentifier in step 288. For example, when the file name includes a filetype identifier 270 (such as .wav, .mov, .mp3, etc.) or the file commandincludes a parameter with a file type identifier (such astype=“application/x-shockwave-flash”), the browser 208 selects amultimedia player operable to process and display such identified filetypes.

FIG. 11 is a logic flow diagram of an embodiment of a method 300 fordetermining a location of a data object in response to a file command.In step 302, the browser 208 processes the file command to determine alocation of the data object. For example, the file name may include alocal drive or domain name or an IP address of the location of the dataobject. The domain name and/or IP address may be used to perform a tablelookup, an address translation, domain name service lookup or a link/webdirectory lookup to determine the location of the data object. In anembodiment, the browser 208 determines the location of the data objectas the DSN memory. In another embodiment, the application program 212determines the location of the data object as the DSN memory. In step304, when the file name points to a DSN memory 22, either local orexternal, the browser 208 requests DS processing module 34 to retrievethe data object from the DSN memory 22 as an input for applicationprogram 212. In another embodiment, application program 212 requests theDS processing module 34 to retrieve the data object from the DSN memory22.

When the file name points to another type of location, other than a DSNmemory 22, either local or external, in step 308, the data object isretrieved from the other location in step 310. The other locationincludes, for example, a file server, web server, another type ofmemory, etc. When the location cannot be identified in step 308, theprocess returns to step 302 to further process the file name or requestfurther information.

FIG. 12 is a logic flow diagram of an embodiment of a method 318 forretrieving the data object from the DSN memory. In step 320, a virtualDSN address for the data object is determined. In an embodiment, thefile name includes one or more fields of the virtual DSN address of thedata object. For example, the file name of the data object includes thefollowing: localdsnet.com/DSNvirtualaddress/dataobjectname.mov. Thevirtual DSN address of the data object may be the source name 35 shownin FIG. 3 or other identifier that identifies the virtual DSN addressspace 148 in the user vault assigned to the data object or itscorresponding data segments or data slices.

In another embodiment, the file name includes the data object name 88shown in FIG. 3 and the virtual DSN address is determined from the dataobject name 88 and/or a user ID 86 associated with user device 12 a-b.The virtual DSN address for the data object is then determined from alook up of the virtual DSN address space 148 for a user vault shown inFIG. 6. From the virtual DSN address of the data object, the DSprocessing module 34 then determines a physical address for a pluralityof data slices of data segments for the data object based on the virtualDSN address to physical location table 142.

In step 322, the DS processing module 34 determines whether to streamthe data object. In an embodiment, the data object includes multimediacontent, such as audio and/or video file data. The DS processing module34 may stream file data of the data object to the application program212 as sequential data segments. For example, the data object is storedby partitioning the data object into data segments 1 through Y, and thengenerating a number X of encoded data slices from each data segmentbased on an error encoding dispersal function. To stream file data fromthe data object, the DS processing module 34 reconstructs each of thedata segments in sequential order 1 through Y.

When the DS processing module determines to stream the data object, theDS processing module 34 determines a next sequential data segment of thedata object to produce an identified data segment in step 324. The DSprocessing module 34 retrieves at least a number T of the plurality ofencoded data slices needed to reconstruct the identified data segment instep 326. In step 328, the DS processing module 34 reconstructs theidentified data segment to produce a reconstructed data segment. The DSprocessing module 34 provides the reconstructed data segment to theapplication program 212, such as a multimedia player or other multimediaplatform, for processing (such as rendering of the file data) fordisplay. In an embodiment, the application program 212 provides therendered file data to the GUI 206 for final conversion to a formatcompatible with the user device display. In step 332, the DS processingmodule 34 determines whether additional data segments need to bereconstructed, e.g. whether a number Y of data segments have beenreconstructed. If so, the DS processing module 34 ends streaming of thedata object in step 334. If not, the process continues to step 324 toidentify the next sequential data segment.

When the DS processing module 34 determines to download the data objectwithout streaming in step 332, the DS processing module 34 reconstructsthe plurality of data segments of the data object in step 336 and thenprovides the location of downloaded data object to the applicationprogram 212 when the download is complete in step 338.

FIG. 13 is a schematic block diagram of another embodiment of a computersystem 200 operable to access a data object from DSN memory 22. Thecomputer system 200 includes one or more user devices 12, 14, a DSprocessing unit 16, a local DSN memory 22, an external network 220 andan external memory 224. In an embodiment, the user device 12 and theuser device 14 are operably coupled to the DSN memory 22 through a localconnection or local area network or through an external network such asexternal network 220. The user devices 12, 14 are operably coupled tothe external memory 224 through the external network 220.

Application program 212 in user device 212 includes DS processing 34that is operable to access data objects in DSN memory 22. The DSprocessing 34 enables the application program 212 to recognize virtualDSN addresses of data objects stored in DSN memory 22 and store,retrieve and access such data objects from DSN memory 22. In user device12, application program 212 includes a DS processing plugin 216 that isoperable to launch DS processing 34 in DS processing unit 16. The DSprocessing plugin 216 enables application program 212 to recognizevirtual DSN addresses of data objects stored in DSN memory 22 and store,retrieve and access such data objects from DSN memory 22.

FIG. 14 is a logic flow diagram of an embodiment of a method 350 foraccessing a data object stored in a DSN memory 22 by an applicationprogram 212 in user device 12, 14. In step 352, the application programreceives a file command that includes a file name of a data object.Based on the file command for the data object, and in particular forexample, a drive or IP address or domain name, the application program212 determines a location for the data object in step 354. For example,the IP address or domain name may be used to perform a table lookup, anaddress translation, domain name service lookup or a link/web directorylookup to determine the location of the data object. A local drive maybe mapped to a local DSN memory 22. When the application program 212determines that the data object is located in a local or external DSNmemory 22, it launches DS processing 34. The DS processing 34 determinesa virtual DSN address of the data object for the application program 212in step 356. File data from the data object is retrieved from the DSNmemory in step 358. The application program 212 then processes the dataobject for display. In an embodiment, the data object is downloadedprior to display. In another embodiment, file data from the data objectis streamed to the application program 212 and displayed as processed.

FIG. 15 is a schematic block diagram of another embodiment of a computersystem 400 operable to access a data object from DSN memory 22. Thecomputer system 400 includes one or more user devices 12 c-d, a localDSN memory 22, an external network 220 and an external memory 224. In anembodiment, the user devices 12 c-d are operably coupled to the DSNmemory 22 through a local connection or local area network or through anexternal network such as external network 220. The user devices 12 c-dare operably coupled to the external memory 224 through the externalnetwork 220. The external memory 224 may include, for example, a fileserver, web server, another DSN memory 22, etc. The external network mayinclude a metropolitan area network (MAN) and/or a wide area network(e.g., the internet and/or intranet).

User Device 12 c includes a graphical user interface (GUI) 206, acommand line interface (CLI) 402, a command line interpreter 404, anoperating system (OS) 210 and application program 212. The CLI 402 is atext interface for receiving file commands to perform various tasks. TheCLI interpreter 404 receives the file commands entered at the CLI 402and interprets and executes the file commands. For example, the commandline interpreter 404 may include a Unix shell program (such sh, Bash,ksh, csh, etc.), DOS COMMAND.COM, Microsoft Windows PowerShell,Macintosh Terminal, etc. The application program 212 includes a videoand/or audio media player, such as Windows Media Player, AppleQuicktime, Real Player, Apple iTunes, Adobe Flash Player, etc. In anembodiment illustrated in user device 12 c, the application program 212includes a DS processing module 34 that is operable to interface withDSN memory 22 through DSN interface 32. The application program 212 mayalso access external memory 224 through interface 30. In an embodiment,in response to one or more file commands input at the CLI 402, the CLIinterpreter 404 is operable to launch the application program 212 toretrieve and display a data object stored in DSN memory 22.

FIG. 16 is a logic flow diagram of an embodiment of a method 410 forretrieving a data object from a DSN memory 22. In step 420, the commandline interpreter 404 receives a command line input at the CLI 302. Thecommand line interpreter 404 analyzes the one or more file commands inthe input and interprets the file command to launch an applicationprogram 212 to open the data object in step 422. In this embodiment, theapplication program 212 receives the file name of the data object anddetermines the data object is located in a DSN memory in step 424. Asdescribed herein, the application program 212 determines the location ofthe data object based on the file command. For example, the file name ofthe data object includes a local drive or domain name or an IP addressthat points to the location of the data object. For example, when“localdsnet.com” is a domain name for a local DSN memory 22, theapplication program 212 interprets the file name“localdsnet.com/dataobjectname.mov” to indicate that the data object islocated in the local DSN memory 22. In another example, when“externaldsnet.com” is a domain name for an external DSN memory 22accessed by the external network 220, the application program 212determines that a data object with a file name“externaldsnet.com/dataobjectname.mp3” is located in the external DSmemory 22.

The application program 212 then requests the DS processing module 34 toretrieve the data object in step 426. The DS processing module 34 maystream sequential data segments of the data object to the applicationprogram 212 for display or reconstruct the data object prior to display.The application program 212 receives the file data from the data objectand processes the file data for display.

Referring back to FIG. 15, the command line interpreter 404 and DSprocessing 34 are operably coupled for example by the operating system210. In operation, the command line interpreter 404, in response to oneor more file commands input at CLI 302, recognizes a domain name or IPaddress for DSN memory 22 in the file command and launches DS processingmodule 34 to retrieve a data object in DSN memory 22 and input the dataobject to application program 212. The command line interpreter 404 alsolaunches application program 212 to receive file data from DS processingmodule 34 to open it for display.

FIG. 17 is a logic flow diagram of an embodiment of a method 450 forretrieving a data object from a DSN memory for display. In step 452, thecommand line interpreter 404 receives a command line input at the CLI302. The command line interpreter 404 analyzes the one or more filecommands in the input and interprets the file command to launchapplication program 212 to open the data object in step 454.

In this embodiment, the command line interpreter 404 determines the dataobject is located in the DSN memory in step 456. The command lineinterpreter 404 determines the location of the data object based on alocal drive, domain name or IP address in the file command. The commandline interpreter 404 then requests the DS processing module 34 toretrieve the data object for the application program 212 in step 458.The DS processing module 34 may stream sequential data segments of thedata object to the application program 212 for display or reconstructthe whole data object prior to display. In step 460, the command lineinterface requests the application program 212 to receive the dataobject from the DS processing module 34 and process it for display.

As may be used herein, the term(s) “coupled to” and/or “coupling” and/orincludes direct coupling between items and/or indirect coupling betweenitems via an intervening item (e.g., an item includes, but is notlimited to, a component, an element, a circuit, and/or a module). As mayfurther be used herein, inferred coupling (i.e., where one element iscoupled to another element by inference) includes direct and indirectcoupling between two items in the same manner as “coupled to”. As mayeven further be used herein, the term “operable to” indicates that anitem includes one or more of power connections, input(s), output(s),etc., to perform one or more its corresponding functions and may furtherinclude inferred coupling to one or more other items. As may stillfurther be used herein, the term “associated with”, includes directand/or indirect coupling of separate items and/or one item beingembedded within another item.

The present invention has also been described above with the aid ofmethod steps illustrating the performance of specified functions andrelationships thereof. The boundaries and sequence of these functionalbuilding blocks and method steps have been arbitrarily defined hereinfor convenience of description. Alternate boundaries and sequences canbe defined so long as the specified functions and relationships areappropriately performed. Any such alternate boundaries or sequences arethus within the scope and spirit of the claimed invention.

The present invention has been described above with the aid offunctional building blocks illustrating the performance of certainsignificant functions. The boundaries of these functional buildingblocks have been arbitrarily defined for convenience of description.Alternate boundaries could be defined as long as the certain significantfunctions are appropriately performed. Similarly, flow diagram blocksmay also have been arbitrarily defined herein to illustrate certainsignificant functionality. To the extent used, the flow diagram blockboundaries and sequence could have been defined otherwise and stillperform the certain significant functionality. Such alternatedefinitions of both functional building blocks and flow diagram blocksand sequences are thus within the scope and spirit of the claimedinvention. One of average skill in the art will also recognize that thefunctional building blocks, and other illustrative blocks, modules andcomponents herein, can be implemented as illustrated or by discretecomponents, application specific integrated circuits, processorsexecuting appropriate software and the like or any combination thereof.

What is claimed is:
 1. A non-transitory memory device storingoperational instructions that, when executed by a processing module,causes the processing module to: interpret a file command, wherein thefile command includes a file name for a data object; determine that thedata object is stored in stored in a distributed storage network (DSN)memory, wherein the data object is encoded using a dispersed storageerror encoding function to produce a set of encoded data segments andinterleaving an encoded data segment of the set of encoded data segmentsinto a number X of a plurality of encoded data slices wherein the numberX of the plurality of encoded data slices is stored in the DSN memoryand wherein the data object is encoded using the error encodingdispersal storage function by: arranging data blocks of the data objectinto a data matrix; generating an encoded data matrix based on the datamatrix and an encoding matrix; and arranging data blocks of the encodeddata matrix into the set of encoded data segments; retrieve from the DSNmemory at least a number T of the plurality of encoded data slices,wherein the number T of the plurality of encoded data slices is neededto reconstruct the data object based on the error encoding dispersalstorage function and wherein the number T equals less than the number X;and reconstruct the data object from at least the number T of theplurality of encoded data slices to produce a reconstructed data object2. The non-transitory memory device of claim 1, wherein thenon-transitory memory device stores further operational instructionsthat, when executed by the processing module, causes the processingmodule to: determine that the data object is stored in the DSN memorybased on the file name for the data object, wherein the file name forthe data object includes a domain name associated with the DSN memory.3. The non-transitory memory device of claim 1, wherein thenon-transitory memory device stores further operational instructionsthat, when executed by the processing module, causes the processingmodule to: determine that the data object is stored in the DSN memorybased on the file name for the data object, wherein the file name forthe data object includes an identifier of a local drive mapped to theDSN memory.
 4. The non-transitory memory device of claim 1, wherein thenon-transitory memory device stores further operational instructionsthat, when executed by the processing module, causes the processingmodule to: determine that the data object is stored in the DSN memorybased on the file name for the data object, wherein the file name forthe data object includes a virtual DSN address of the data object. 5.The non-transitory memory device of claim 4, wherein the non-transitorymemory device stores further operational instructions that, whenexecuted by the processing module, causes the processing module to:determine a physical location for the data object by accessing a virtualDSN address to physical location table, wherein the virtual DSN addressto physical location table includes a mapping of the virtual DSN addressof the data object to one or more physical locations of the plurality ofencoded data slices of the data object.
 6. The non-transitory memorydevice of claim 1, wherein the non-transitory memory device storesfurther operational instructions that, when executed by the processingmodule, causes the processing module to: determine a virtual DSN addressfor the data object by accessing a virtual DSN address space, whereinthe virtual DSN address space includes a mapping of the virtual DSNaddress to the file name of the data object.
 7. The non-transitorymemory device of claim 1, wherein the non-transitory memory devicestores further operational instructions that, when executed by theprocessing module, causes the processing module to: access a user vaultin a virtual DSN address space based on a user vault identifier in thefile name for the data object; determine the virtual DSN address for thedata object using the virtual DSN address space and the file name forthe data object; and determine a physical location for the data objectby accessing a virtual DSN address to physical location table, whereinthe virtual DSN address to physical location table includes a mapping ofthe virtual DSN address of the data object to one or more physicallocations of the plurality of encoded data slices of the data object. 8.A non-transitory memory device storing operational instructions that,when executed by a processing module, causes the processing module to:process a file command to display multimedia content from a data object,wherein the file command includes a filename for the data object;determine the data object is stored in a distributed storage network(DSN) memory, wherein the data object is divided into a plurality ofdata segments and wherein each of the plurality of data segments isencoded using an error encoding dispersal function to generate aplurality of encoded data segments and wherein each of the plurality ofencoded data segments is interleaved into an X number of plurality ofencoded data slices for storage in the DSN memory and wherein the dataobject is encoded using the error encoding dispersal storage functionby: arranging data blocks of the data object into a data matrix;generating an encoded data matrix based on the data matrix and anencoding matrix; and arranging data blocks of the encoded data matrixinto the set of encoded data segments; identify a first data segment ofthe plurality of data segments of the data object to generate anidentified data segment; retrieve at least a number T of a plurality ofencoded data slices for the identified data segment from the DSN memory,wherein the number T is less than the number X and corresponds to anumber of the plurality of encoded data slices needed to reconstruct theidentified data segment based on the error encoding dispersal function;reconstruct the identified data segment from at least the number T ofthe plurality of encoded data slices to produce a reconstructed datasegment; process the reconstructed data segment to generate themultimedia content; and transmit the multimedia content for display in agraphical user interface.
 9. The non-transitory memory device of claim8, wherein the non-transitory memory device stores further operationalinstructions that, when executed by the processing module, causes theprocessing module to: sequentially stream the plurality of data segmentsof the data object by: identifying a next sequential data segment of thedata object to generate an identified next sequential data segment;retrieving at least a number T of the plurality of encoded data slicesfor the identified next sequential data segment from the DSN memory,wherein the number T corresponds to a number of the plurality of encodeddata slices needed to reconstruct the identified next sequential datasegment based on the error encoding dispersal function; andreconstructing the identified next sequential data segment from at leastthe number T of the plurality of encoded data slices to produce a nextreconstructed data segment.
 10. The non-transitory memory device ofclaim 8, wherein the non-transitory memory device stores furtheroperational instructions that, when executed by the processing module,causes the processing module to: determine that the data object isstored in the DSN memory based on the file name for the data object. 11.The non-transitory memory device of claim 10, wherein the non-transitorymemory device stores further operational instructions that, whenexecuted by the processing module, causes the processing module to:access a user vault in a virtual DSN address space; determine thevirtual DSN address for the data object using the virtual DSN addressspace and the file name for the data object; and determine a physicallocation for the data object by accessing a virtual DSN address tophysical location table, wherein the virtual DSN address to physicallocation table includes a mapping of the virtual DSN address of the dataobject to one or more physical locations of the plurality of encodeddata slices of the data object.
 12. A device comprising: a browsingmodule operable to: process a request to display a data object;determine the data object is stored in a distributed storage network(DSN) memory, wherein the data object is stored in the DSN memory asplurality of encoded data slices, wherein the data object is dividedinto a plurality of data segments and wherein each of the plurality ofdata segments is encoded using an error encoding dispersal function togenerate a plurality of encoded data segments and wherein each of theplurality of encoded data segments is separated into an X number of theplurality of encoded data slices; request a DS processing module toretrieve the data object stored in the DSN memory, wherein the DSprocessing module is operable to retrieve at least a number T of theplurality of encoded data slices, wherein the number T equals less thanthe X number of the plurality of encoded data slices and equals a numberof the plurality of encoded data slices needed to reconstruct the dataobject based on the error encoding dispersal storage function and toreconstruct the data object from at least the number T of the pluralityof encoded data slices to produce a reconstructed data object; andprocess the reconstructed data object for display.
 13. The device ofclaim 12, wherein the browser module includes the DS processing module.14. The device of claim 12, wherein the browser module includes a DSprocessing module plug in operable to: request the DS processing moduleto retrieve the data object stored in the DSN memory; and receive thereconstructed data object from the DS processing module.
 15. The deviceof claim 12, wherein the browsing module is further operable to: launchan application program to process the reconstructed data object fordisplay, wherein the reconstructed data object is displayed using atleast one of: a graphical user interface generated by the applicationprogram and a graphical user interface (GUI) generated by the browsingmodule.
 16. The device of claim 12, wherein the browsing module isoperable to process a request to display a data object by: receiving afile command, wherein the file command includes a file name of the dataobject.
 17. The device of claim 16, wherein the browsing module isoperable to determine the data object is stored in the DSN memory usingthe file name of the data object.
 18. The device of claim 12, whereinthe browsing module is operable to launch the DS processing module inresponse to determining the data object is stored in the DSN memory. 19.The device of claim 12, wherein the browsing module is further operableto: display a formatted page that includes at least one link to anembedded file command; receive a selection of the at least one link tothe embedded file command; and determine the embedded file command isthe request to display the data object, wherein the embedded filecommand includes a file name of the data object.
 20. The device of claim12, wherein the browsing module is further operable to: receive a textstring input, wherein the text string input includes a file name of adata object; and determine the text string input is the request todisplay the data object.